$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa File: 50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa (raw, json) Hash identifier: k7oxX8w2Vio+mfOEGPbYOI/sfcZFU3SjZLFZCAB+8H8= Subject key identifier: C2:48:3D:78:DF:3B:8D:8C:DB:FB:A5:89:D2:10:01:8A:5A:1E:D2:C2 Certificate issuer: /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Certificate serial: 010D0C9F4328584D59EA6F2E84CBBEB5A0BD0AC0 Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22018 IP address blocks: 69.64.96.0/20 maxlen: 24 209.25.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6f:2e:84:cb:be:b5:a0:bd:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=164e2d65-bd73-4808-8059-ff983a57bf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:59:1b:ef:0d:1d:cd:ab:91:a5:79:1e:4c:bd: db:82:80:80:cf:29:d8:22:e8:ac:60:78:ad:50:79: 22:f4:53:86:40:2d:e0:f7:49:e6:5e:b1:3f:22:15: ba:38:f3:6e:6a:0e:51:f0:b8:20:24:5e:2f:10:a9: bd:e5:a3:b9:ac:ec:00:03:14:fd:a3:3a:f8:88:5c: 0f:64:17:5b:4f:a9:e5:7c:d7:70:03:4b:8e:b7:78: 83:04:dc:a0:a2:4d:62:2e:4d:c2:b4:cd:4c:62:76: a1:3d:21:9e:25:4a:c5:8b:f7:ef:54:e3:fd:88:b9: 02:9e:5c:63:f5:53:a3:d1:0f:09:9a:dc:51:00:01: ed:8e:c8:2c:00:59:55:96:66:ab:80:6a:85:08:a6: f4:bb:65:64:24:d1:46:8b:13:af:4d:b9:d8:19:99: 6b:8f:3b:c0:34:00:fc:96:8b:23:b6:12:fe:6e:58: 88:c8:0d:a3:6e:9c:cb:e6:cb:1a:24:de:98:61:87: 67:ed:8f:e0:e1:41:f1:08:99:8d:a0:2d:80:60:3d: 79:6d:36:3f:46:7b:0c:f7:19:e4:b2:31:29:67:ed: 59:39:da:e9:f5:c9:66:55:33:01:2c:9d:13:21:dd: 60:94:75:f5:05:f4:0d:db:21:21:00:cb:72:bd:fa: eb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:3D:78:DF:3B:8D:8C:DB:FB:A5:89:D2:10:01:8A:5A:1E:D2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl X509v3 Authority Key Identifier: keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer sbgp-ipAddrBlock: critical IPv4: 69.64.96.0/20 209.25.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:40:c6:b1:0d:6e:30:a8:7d:24:93:fb:66:cd:0e:ad:d4:d3: 0c:04:ac:32:bf:5b:41:0c:03:95:79:9d:0a:b3:cf:24:ed:e9: 31:34:d5:da:df:13:4d:89:3e:9c:d7:54:37:2a:ba:d3:bb:00: d6:60:1e:7e:5b:dc:56:e4:1f:bb:c5:10:3e:c1:52:af:38:d2: a9:a6:40:fe:e9:9c:95:03:ba:f2:3b:ae:d1:74:89:e0:cd:cf: b7:de:93:35:71:04:72:dd:5f:a8:06:c3:52:82:d3:16:71:91: 8f:88:b6:cf:c3:03:81:29:d3:45:ec:39:03:2d:d4:52:62:3e: 3a:b0:11:d7:6a:34:bf:aa:d9:fc:d2:44:08:06:a3:27:0b:64: b0:c9:69:3a:d9:df:a1:46:bc:06:fe:e0:f8:30:84:f4:c9:00: 1a:62:ce:d4:0b:d6:b7:95:23:bd:15:46:d7:34:ac:56:8e:9e: 65:3c:c1:7e:94:11:4e:7f:19:7a:9a:1b:98:b0:2b:cd:b5:89: 9c:c9:51:4e:f1:e8:77:e3:c7:93:e5:99:9e:fa:68:b8:f8:68: f6:0f:89:99:4f:e7:84:4d:8e:c1:9b:42:80:6f:81:3d:58:9d: d6:24:11:fd:fd:c6:01:7b:13:0f:e7:57:80:0d:86:fb:d5:50: 3e:93:97:eb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Z6m8uhMu+taC9CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTViZjk1ZDUtMWM5Yi00Y2VhLTgxNDItY2MxYTQ2OTlj N2E2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTY0ZTJkNjUtYmQ3My00ODA4LTgwNTktZmY5ODNhNTdiZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFkb7w0dzauRpXkeTL3bgoCAzynYIuisYHit UHki9FOGQC3g90nmXrE/IhW6OPNuag5R8LggJF4vEKm95aO5rOwAAxT9ozr4iFwP ZBdbT6nlfNdwA0uOt3iDBNygok1iLk3CtM1MYnahPSGeJUrFi/fvVOP9iLkCnlxj 9VOj0Q8JmtxRAAHtjsgsAFlVlmargGqFCKb0u2VkJNFGixOvTbnYGZlrjzvANAD8 losjthL+bliIyA2jbpzL5ssaJN6YYYdn7Y/g4UHxCJmNoC2AYD15bTY/RnsM9xnk sjEpZ+1ZOdrp9clmVTMBLJ0TId1glHX1BfQN2yEhAMtyvfrrqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMJIPXjfO42M2/ulidIQAYpaHtLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJm OTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5OWM3YTYvNTBmODAzM2ItNzY2OS0z Y2RmLWE3YzQtNmQ1ZDc5YjdlNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTViZjk1ZDUtMWM5Yi00Y2VhLTgx NDItY2MxYTQ2OTljN2E2Lzk1YmY5NWQ1LTFjOWItNGNlYS04MTQyLWNjMWE0Njk5 YzdhNi5jcmwwHwYDVR0jBBgwFoAULR3aRmmC6fgPdb4FsB3W7oOsYpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFh NDY5OWM3YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERUBgAwQC 0RnQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGBAxrENbjCofSST+2bNDq3U0wwErDK/W0EMA5V5nQqzzyTt 6TE01drfE02JPpzXVDcqutO7ANZgHn5b3FbkH7vFED7BUq840qmmQP7pnJUDuvI7 rtF0ieDNz7fekzVxBHLdX6gGw1KC0xZxkY+Its/DA4Ep00XsOQMt1FJiPjqwEddq NL+q2fzSRAgGoycLZLDJaTrZ36FGvAb+4PgwhPTJABpiztQL1reVI70VRtc0rFaO nmU8wX6UEU5/GXqaG5iwK821iZzJUU7x6Hfjx5PlmZ76aLj4aPYPiZlP54RNjsGb QoBvgT1YndYkEf39xgF7Ew/nV4ANhvvVUD6Tl+s= -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:50 2026 by rpki-client